07-19-2017 04:31 AM - edited 03-05-2019 08:52 AM
Hi All
We have setup netflow on our ISR 4351 router
we don't seem to be receiving flows on our monitoring device
On the router it is saying flow monitor (inactive)
Why would this be?
We have set up using the below commands
flow record PRTG-NETFLOW
description config for PRTG-NETFLOW
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match interface output
collect transport tcp flags
collect interface input
collect interface output
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last
!
flow exporter PRTG-NETFLOW
description Exporter for PRTG-NETFLOW
source GigabitEtherent 0/0/0
destination x.x.x.x
transport udp 2055
export-protocol netflow-v5
template data timeout 60
!
flow monitor PRTG-NETFLOW
exporter PRTG-NETFLOW
record PRTG-NETFLOW
cache timeout active 60
!
interface GigabitEtherent 0/0/0
ip flow monitor PRTG-NETFLOW input
ip flow monitor PRTG-NETFLOW output
07-19-2017 10:38 AM
Hello,
Flexible Netflow exporters use UDP and netflow-v9, try and change that accordingly. Also, I don't think the exporter needs a source interface:
flow record PRTG-NETFLOW
description config for PRTG-NETFLOW
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match interface output
collect transport tcp flags
collect interface input
collect interface output
collect counter bytes long
collect counter packets long
collect timestamp sys-uptime first
collect timestamp sys-uptime last
!
flow exporter PRTG-NETFLOW
description Exporter for PRTG-NETFLOW
no source GigabitEtherent 0/0/0
destination x.x.x.x
transport udp 2055
export-protocol netflow-v9
template data timeout 60
!
flow monitor PRTG-NETFLOW
exporter PRTG-NETFLOW
record PRTG-NETFLOW
cache timeout active 60
!
interface GigabitEtherent 0/0/0
ip flow monitor PRTG-NETFLOW input
ip flow monitor PRTG-NETFLOW output
Check the link below for reference:
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/xe-3s/fnf-xe-3s-book/fnf-fnetflow.html
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide